M5: OS and web security - C.9 Flashcards
What is the main protocol for data transfer between web browsers and servers?
M5: OS and web security - C.9
HTTP (Hypertext Transfer Protocol).
What does HTTPS stand for?
M5: OS and web security - C.9
HTTP Secure.
What is the purpose of the Domain Name System (DNS)?
M5: OS and web security - C.9
To define a scheme of hierarchical domain names and translate them into IP addresses.
What is a URL?
M5: OS and web security - C.9
A Uniform Resource Locator, which specifies the source locations of files and web pages.
What is the role of HTML in web pages?
M5: OS and web security - C.9
HTML (Hypertext Markup Language) is used to format and display content on web pages.
What is JavaScript used for in HTML documents?
M5: OS and web security - C.9
To execute code that manipulates the displayed page and underlying document object.
What is the Same-Origin Policy (SOP)?
M5: OS and web security - C.9
A security measure that isolates documents from different origins to prevent interference.
What is a cookie in the context of web browsing?
M5: OS and web security - C.9
A small data string passed from a server to a client, used to retain state across HTTP requests.
What is a session cookie?
M5: OS and web security - C.9
A cookie stored in browser memory that is deleted after the window closes.
What does the Secure attribute in a cookie do?
M5: OS and web security - C.9
Ensures the cookie is only sent over HTTPS, not HTTP.
What is Cross-Site Scripting (XSS)?
M5: OS and web security - C.9
An attack where malicious scripts are injected into trusted websites.
What is SQL Injection?
M5: OS and web security - C.9
An attack that involves inserting malicious SQL queries into input fields to manipulate databases.
What is Cross-Site Request Forgery (CSRF)?
M5: OS and web security - C.9
An attack that tricks a user into performing actions on a different site without their knowledge.
What is the purpose of the HTTP Referer header?
M5: OS and web security - C.9
To hold the URL of the page from which a request was made.
What is an HTTP proxy?
M5: OS and web security - C.9
An intermediary server that negotiates access to endpoint server resources and relays responses.
What is the CONNECT method in HTTP?
M5: OS and web security - C.9
A method used to set up a TCP connection to a server and relay encrypted data.
What is the main goal of TLS (Transport Layer Security)?
M5: OS and web security - C.9
To provide a secure channel between two endpoints.
What is a pre-shared key (PSK) in TLS?
M5: OS and web security - C.9
A long-term secret used for key establishment in TLS connections.
What is the purpose of the TLS handshake?
M5: OS and web security - C.9
To establish cryptographic parameters and authenticate the server to the client.
What is the Record Layer in TLS?
M5: OS and web security - C.9
The layer that protects application data using negotiated parameters.
What is the DOM (Document Object Model)?
M5: OS and web security - C.9
A hierarchical structure representing an HTML document, used to access and manipulate web page content.
What is the window.location property in the DOM?
M5: OS and web security - C.9
It represents the URL of the document displayed in the window.
What is the purpose of the Path attribute in a cookie?
M5: OS and web security - C.9
To control which origin server pages a cookie is returned to.
What is the HttpOnly attribute in a cookie?
M5: OS and web security - C.9
It makes the cookie accessible only through HTTP, not via JavaScript.
What is the main function of a web form in HTML?
M5: OS and web security - C.9
To solicit user input and send it to a server via an HTTP request.
What is the purpose of the meta refresh tag in HTML?
M5: OS and web security - C.9
To redirect the browser to a new URL after a specified time.
What is the purpose of the Location header in an HTTP response?
M5: OS and web security - C.9
To specify the target URL for redirection.
What is the main security concern with HTTP proxies?
M5: OS and web security - C.9
They can be used for middle-person attacks if not trustworthy.
What is the main difference between HTTP and HTTPS?
M5: OS and web security - C.9
HTTPS uses TLS to encrypt data, providing a secure channel.
What is the main challenge with providing meaningful security indicators to users?
M5: OS and web security - C.9
Making them intuitive and simple to avoid dangerous errors.
